Skip to content

chore: bump reactivecircus/android-emulator-runner from 2.35.0 to 2.37.0#678

Open
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0
Open

chore: bump reactivecircus/android-emulator-runner from 2.35.0 to 2.37.0#678
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 16, 2026

Bumps reactivecircus/android-emulator-runner from 2.35.0 to 2.37.0.

Release notes

Sourced from reactivecircus/android-emulator-runner's releases.

v2.37.0

What's Changed

Full Changelog: ReactiveCircus/android-emulator-runner@v2.36.0...v2.37.0

v2.36.0

What's Changed

New Contributors

Full Changelog: ReactiveCircus/android-emulator-runner@v2.35.0...v2.36.0

Changelog

Sourced from reactivecircus/android-emulator-runner's changelog.

Change Log

Unreleased

v2.37.0

  • Update SDK build tools to 36.0.0, update SDK command-line tools to 20.0. - #467
  • Run action on Node 24. - #466
  • Update Node and npm packages. - #466

v2.36.0

  • Remove --abi option to better support 16-KB-based system images (#456).

v2.35.0

  • Optimize config.ini updates and efficiency improvements report (#436).
  • Fix pre-emulator-launch-script (#439).
  • Allow google_apis_ps16k as a valid target (#440).

v2.34.0

  • Allow arbitrary value for api-level such as Baklava and 35-ext15. - 428
  • Add option to specify system-image-api-level to use a system image with a different API level than the platform. - 428
  • Support automotive and desktop targets: android-automotive, android-automotive-playstore, android-desktop. - 428

v2.33.0

  • Fix missing AVD directory in ubuntu-24.04 runner. - 415
  • Update SDK build tools to 35.0.0, update SDK command-line tools to 16.0. - #356
  • Stop changing owner of the SDK directory. - 406 #409
  • Upgrade to latest npm dependencies. - #401

v2.32.0

  • Add port parameter for customizing the emulator port to use. - #383

v2.31.0

  • Support setting VanillaIceCream as api-level. - #378
  • Install platforms for the specified api-level. - #384

v2.30.1

  • Run action on Node 20. - #371

v2.30.0

... (truncated)

Commits
  • e89f39f Merge branch 'main' into release/v2
  • 9644b1a Prepare for release 2.37.0.
  • 4fe4b1a Build build tools 36.0.0, SDK command-line tools 12.0. (#467)
  • 6fe36e1 Update to Node 24. (#466)
  • 597aa7c Modernize test-fixture project. (#465)
  • 5d6e86d Merge branch 'main' into release/v2
  • 38164a2 Prepare for release 2.36.0.
  • 969c989 Add F3D in the list of projects (#462)
  • 29b35ed fix: remove problematic / unneeded --abi option in avd creation (#456)
  • 001613e Replace deprecated macos-13 runner with macos-15-intel. (#460)
  • Additional commits viewable in compare view

## [5.78.3](v5.78.2...v5.78.3) (2026-03-11)

### Updates & Maintenance

* bump actions/upload-artifact from 6 to 7 ([#649](#649)) ([0a188b1](0a188b1))
* Update submodules ([cbb17d7](cbb17d7))
@dependabot dependabot Bot requested a review from a team as a code owner March 16, 2026 22:36
@sonarqubecloud
Copy link
Copy Markdown

mparticle-automation and others added 11 commits March 23, 2026 14:39
## [5.78.4](v5.78.3...v5.78.4) (2026-03-23)

### Updates & Maintenance

* Update submodules ([08dab75](08dab75))
## [5.78.5](v5.78.4...v5.78.5) (2026-03-25)

### Updates & Maintenance

* Update submodules ([86d8d97](86d8d97))
* fix: increase MPLatch timeout from 5s to 30s

The 5-second timeout is too short for WebView JS bridge tests running
on newer GitHub Actions runner images (ubuntu24/20260309.50+). The
MParticleJSInterfaceITest tests consistently fail because JS execution
in the emulator WebView doesn't complete within 5 seconds on these
environments.

Increasing to 30 seconds provides sufficient margin while still
catching genuine hangs via the workflow-level timeout-minutes: 15.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: use explicit 30s timeout in JS bridge tests only

Instead of increasing the global MPLatch timeout (used by 20+ test
files), use an explicit 30-second await in MParticleJSInterfaceITest
only. WebView JS execution needs more time on newer CI runner images,
but other tests don't need the longer timeout.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* TRIAGE-608: Add max persistence age override option

* TRIAGE-608: Update throttl ts on success + tests

* TRIAGE-608: Make properties @VisibleForTesting

* TRIAGE-608: Fix retry-on-failure throttle logic
* feat: add customBaseURL CNAME support to NetworkOptions

Adds NetworkOptions.Builder.setCustomBaseURL(String) which routes all
mParticle endpoint traffic (config, events, identity, alias, audience)
through a single HTTPS CNAME host. When set, customBaseURL takes
priority over individual domain mappings and rewrites paths to match
CDN routing: /config/v4/, /nativeevents/v2/, /identity/v1/,
/nativeevents/v1/identity/, /nativeevents/v1/<key>/audience.

Also adds R8 keep rules for MParticle$Internal and
ConfigManager.getNetworkOptions() so kits can read customBaseURL after
minification.

The Rokt kit reads NetworkOptions.customBaseURL and forwards it to the
Rokt SDK: mparticle-integrations/mparticle-android-integration-rokt#143

Mirrors iOS work from mparticle-apple-sdk#760.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix: persist customBaseURL across NetworkOptions JSON round-trip

NetworkOptions.toJson() and withNetworkOptions(String) did not include
customBaseURL, so any value was silently dropped when UploadSettings
serialized NetworkOptions to the upload database. Events and alias
uploads read back NetworkOptions without customBaseURL and routed to
the default mParticle endpoints instead of the partner CNAME.

Also:
- Extract the customBaseURL/DomainMapping host-resolution branch out of
  getUrl() into a private resolveHost() helper plus a small ResolvedHost
  value type, lowering getUrl()'s cyclomatic complexity.
- Switch java.net.URL / java.net.MalformedURLException to imports.
- Add two androidTest cases covering the round-trip.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* test(android-core): cover custom base URL upload storage

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: Thomson Thomas <thomson.thomas@rokt.com>
## [5.79.0](v5.78.5...v5.79.0) (2026-05-14)

### Features

* add customBaseURL CNAME support to NetworkOptions ([#701](#701)) ([5285149](5285149)), closes [mparticle-apple-sdk#760](mParticle/mparticle-apple-sdk#760)
* Add max persistence age override option [TRIAGE-608] ([#699](#699)) ([ca88322](ca88322))

### Bug Fixes

* increase MPLatch timeout from 5s to 30s ([#695](#695)) ([20f723f](20f723f))

### Updates & Maintenance

* Update submodules ([59a4a9a](59a4a9a))
Bumps [trunk-io/trunk-action](https://github.com/trunk-io/trunk-action) from 1.2.4 to 1.3.1.
- [Release notes](https://github.com/trunk-io/trunk-action/releases)
- [Commits](trunk-io/trunk-action@75699af...04ba50e)

---
updated-dependencies:
- dependency-name: trunk-io/trunk-action
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: James Newman <james.newman@rokt.com>
@dependabot dependabot Bot changed the base branch from main to workstation/6.0-Release May 22, 2026 14:14
@dependabot dependabot Bot force-pushed the dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0 branch from eb87e03 to fe32ea5 Compare May 22, 2026 14:14
@cursor
Copy link
Copy Markdown

cursor Bot commented May 22, 2026

PR Summary

Medium Risk
Changes affect network endpoint URL construction and introduce automated deletion of persisted events/uploads/sessions, which could impact data delivery or retention if misconfigured. Coverage is improved with new unit/instrumentation tests, but the behavior touches core upload and networking paths.

Overview
Adds support for routing all SDK traffic through a single NetworkOptions.setCustomBaseURL(...) CNAME host, including updated URL construction in MParticleBaseClientImpl (with explicit precedence over per-endpoint domain mappings) and safer JSON parsing for legacy/invalid persisted domain mappings.

Introduces a new MParticleOptions.Builder#persistenceMaxAgeSeconds(int) setting and a 24h-throttled retention sweep invoked during uploads that prunes persisted messages, uploads, and sessions older than the configured (or default 90-day) cutoff, with new DB service delete APIs and corresponding tests.

Maintenance updates include CI action bumps (android-emulator-runner to v2.37.0, trunk-action to v1.3.1), version/documentation updates to 5.79.0, ProGuard keep rules for new internal accessors, and increased WebView test latch timeouts to reduce flakiness.

Reviewed by Cursor Bugbot for commit 0f19d0b. Bugbot is set up for automated code reviews on this repo. Configure here.

Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit fe32ea5. Configure here.

Comment thread .mobsf Outdated
- android_ssl_pinning
- accept_self_signed_certificate
- android_manifest_well_known_assetlinks # Sample apps use third-party domains (e.g. Branch mp-fortune.app.link)
- android_task_hijacking1 # Sample apps; targetSdk in build.gradle
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Duplicate android_task_hijacking1 rule in .mobsf

Low Severity

The android_task_hijacking1 ignore rule is listed twice — once at line 18 and again at line 34 — with different comments. The duplicate entry is redundant and should be consolidated.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit fe32ea5. Configure here.

Comment thread .github/workflows/release-publish.yml Outdated
run: ./gradlew publishMavenPublicationToMavenCentralRepository -PVERSION=${{ needs.setup-and-version.outputs.final_version }}

- name: Publish kits to Maven Central
run: ./gradlew publishMavenPublicationToMavenCentralRepository -PVERSION=${{ needs.setup-and-version.outputs.final_version }} -c settings-kits.gradle
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Release publish missing mparticleFromMavenLocalOnly flag for kits

High Severity

The kits publish step uses -c settings-kits.gradle without -Pmparticle.kit.mparticleFromMavenLocalOnly=true. Every other workflow that builds kits with settings-kits.gradle includes this flag. Without it, the kits may attempt to resolve core SDK dependencies from Maven Central instead of Maven local, which can fail due to propagation delays after the core was just published moments earlier.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit fe32ea5. Configure here.

Bumps [reactivecircus/android-emulator-runner](https://github.com/reactivecircus/android-emulator-runner) from 2.35.0 to 2.37.0.
- [Release notes](https://github.com/reactivecircus/android-emulator-runner/releases)
- [Changelog](https://github.com/ReactiveCircus/android-emulator-runner/blob/main/CHANGELOG.md)
- [Commits](ReactiveCircus/android-emulator-runner@b530d96...e89f39f)

---
updated-dependencies:
- dependency-name: reactivecircus/android-emulator-runner
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the base branch from workstation/6.0-Release to main May 22, 2026 14:19
@dependabot dependabot Bot force-pushed the dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0 branch from fe32ea5 to 0f19d0b Compare May 22, 2026 14:19
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants